Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3991 8.8 重要
Network
Belkin International F9K1015 ファームウェア Belkin InternationalのF9K1015 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5614 2026-05-1 10:44 2026-04-6 Show GitHub Exploit DB Packet Storm
3992 8.8 重要
Network
Belkin International F9K1015 ファームウェア Belkin InternationalのF9K1015 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5628 2026-05-1 10:44 2026-04-6 Show GitHub Exploit DB Packet Storm
3993 8.8 重要
Network
Belkin International F9K1015 ファームウェア Belkin InternationalのF9K1015 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5629 2026-05-1 10:44 2026-04-6 Show GitHub Exploit DB Packet Storm
3994 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. AC15 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC15 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5830 2026-05-1 10:44 2026-04-9 Show GitHub Exploit DB Packet Storm
3995 9.8 緊急
Network
Shenzhen Tenda Technology Co.,Ltd. Tenda i3 Firmware Shenzhen Tenda Technology Co.,Ltd.のTenda i3 Firmwareにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-5841 2026-05-1 10:44 2026-04-9 Show GitHub Exploit DB Packet Storm
3996 7.2 重要
Network
ディーリンクジャパン株式会社 dir-882 ファームウェア D-Link CorporationのDIR-882 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-5844 2026-05-1 10:44 2026-04-9 Show GitHub Exploit DB Packet Storm
3997 9.8 緊急
Network
Shenzhen Tenda Technology Co.,Ltd. I12 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のI12 ファームウェアにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-5849 2026-05-1 10:43 2026-04-9 Show GitHub Exploit DB Packet Storm
3998 5.5 警告
Local
Foxit pdf editor
pdf reader
Foxitのpdf editor等の複数製品におけるキャッチされない例外に関する脆弱性 CWE-248
キャッチされない例外
CVE-2026-5937 2026-05-1 10:43 2026-04-27 Show GitHub Exploit DB Packet Storm
3999 5.5 警告
Local
Foxit pdf editor
pdf reader
Foxitのpdf editor等の複数製品における不十分な制御フロー管理に関する脆弱性 CWE-691
不十分な制御フロー管理
CVE-2026-5938 2026-05-1 10:43 2026-04-27 Show GitHub Exploit DB Packet Storm
4000 5.5 警告
Local
Foxit pdf editor
pdf reader
Foxitのpdf editor等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-5939 2026-05-1 10:43 2026-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315381 4.3 MEDIUM
Adjacent
dell emc_appsync Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to in… CWE-611
XXE
CVE-2024-39586 2024-10-17 23:30 2024-10-9 Show GitHub Exploit DB Packet Storm
315382 7.2 HIGH
Network
lylme lylme_spage A vulnerability was found in LyLme_spage 1.9.5. It has been classified as critical. Affected is an unknown function of the file /admin/sou.php. The manipulation of the argument id leads to sql inject… CWE-89
SQL Injection
CVE-2024-9790 2024-10-17 23:26 2024-10-11 Show GitHub Exploit DB Packet Storm
315383 7.2 HIGH
Network
lylme lylme_spage A vulnerability was found in LyLme_spage 1.9.5 and classified as critical. This issue affects some unknown processing of the file /admin/apply.php. The manipulation of the argument id leads to sql in… CWE-89
SQL Injection
CVE-2024-9789 2024-10-17 23:26 2024-10-10 Show GitHub Exploit DB Packet Storm
315384 7.2 HIGH
Network
lylme lylme_spage A vulnerability has been found in LyLme_spage 1.9.5 and classified as critical. This vulnerability affects unknown code of the file /admin/tag.php. The manipulation of the argument id leads to sql in… CWE-89
SQL Injection
CVE-2024-9788 2024-10-17 23:26 2024-10-10 Show GitHub Exploit DB Packet Storm
315385 5.4 MEDIUM
Network
openwebui open_webui In version v0.3.8 of open-webui/open-webui, a vulnerability exists where a token is returned when a user with a pending role logs in. This allows the user to perform actions without admin confirmatio… NVD-CWE-Other
CVE-2024-7049 2024-10-17 23:22 2024-10-10 Show GitHub Exploit DB Packet Storm
315386 5.5 MEDIUM
Local
wireshark wireshark ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file CWE-909
 Missing Initialization of Resource
CVE-2024-9780 2024-10-17 23:18 2024-10-10 Show GitHub Exploit DB Packet Storm
315387 7.1 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be … CWE-908
 Use of Uninitialized Resource
CVE-2024-46865 2024-10-17 23:15 2024-09-27 Show GitHub Exploit DB Packet Storm
315388 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_socket: fix sk refcount leaks We must put 'sk' reference before returning. NVD-CWE-Other
CVE-2024-46855 2024-10-17 23:15 2024-09-27 Show GitHub Exploit DB Packet Storm
315389 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses The panasonic laptop code in various places uses the SINF a… CWE-129
 Improper Validation of Array Index
CVE-2024-46859 2024-10-17 23:15 2024-09-27 Show GitHub Exploit DB Packet Storm
315390 7.0 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: Fix uaf in __timer_delete_sync There are two paths to access mptcp_pm_del_add_timer, result in a race condition: … CWE-416
 Use After Free
CVE-2024-46858 2024-10-17 23:15 2024-09-27 Show GitHub Exploit DB Packet Storm